F5 BIG-IP PEM Denial of Service Vulnerability (CNVD-2018-07870)

F5 BIG-IP is an all-in-one network appliance that integrates network traffic management, application security management, load balancing, etc. PEM is one of the policy enforcement managers. A security vulnerability exists in the F5 BIG-IP PEM. An attacker could exploit this vulnerability to cause...

F5 BIG-IP Arbitrary Code Execution Vulnerability (CNVD-2018-07456)

The BIG-IP platform is the intelligent evolution of Application Delivery Controller ADC technology.The BIG-IP system is at the heart of the information flow between applications and users and ensures that the flow of information between applications and users is seamless. The F5 product modules...

CVE-2018-5504

In some circumstances, the Traffic Management Microkernel TMM does not properly handle certain malformed Websockets requests/responses, which allows remote attackers to cause a denial-of-service DoS or possible remote code execution on the F5 BIG-IP system running versions 13.0.0 - 13.1.0.3 or...

Remote code execution

In some circumstances, the Traffic Management Microkernel TMM does not properly handle certain malformed Websockets requests/responses, which allows remote attackers to cause a denial-of-service DoS or possible remote code execution on the F5 BIG-IP system running versions 13.0.0 - 13.1.0.3 or...

F5 BIG-IP Kernel Reboot Vulnerability

F5 BIG-IP is an all-in-one network device from F5 USA that integrates network traffic management, application security management, load balancing and other functions. A security vulnerability exists in the F5 BIG-IP. An attacker could exploit this vulnerability to cause the Traffic Management...

Design/Logic Flaw

In versions 13.0.0, 12.0.0-12.1.3, or 11.6.0-11.6.2, an F5 BIG-IP virtual server using the URL categorization feature may cause the Traffic Management Microkernel TMM to produce a core file when it receives malformed URLs during categorization...

CVE-2017-6169

In versions 13.0.0, 12.0.0-12.1.3, or 11.6.0-11.6.2, an F5 BIG-IP virtual server using the URL categorization feature may cause the Traffic Management Microkernel TMM to produce a core file when it receives malformed URLs during categorization...

Multiple F5 Products Service Disruption Vulnerabilities

BIG-IP LTM is a product of F5 Corporation of the U.S. F5 BIG-IP LTM is a local traffic manager; BIG-IP AAM is an application acceleration manager. A service interruption vulnerability exists in multiple F5 products. An attacker could exploit this vulnerability to interrupt the Traffic Management...

Denial of Service Vulnerability in Multiple F5 Products (CNVD-2018-01149)

BIG-IP LTM is a product of F5 Corporation of the U.S. F5 BIG-IP LTM is a local traffic manager; BIG-IP AAM is an application acceleration manager. A denial of service vulnerability exists in multiple F5 products. An attacker can exploit this vulnerability by sending a malicious request to cause a...

CVE-2017-6164

Concrete technical details are available: CVE-2017-6164 affects F5 BIG-IP products with TMM Affected: BIG-IP LTM and related modules (AAM, AFM, Analytics, APM, ASM, DNS, Edge Gateway, GTM, Link Controller, PEM, WebAccelerator, WebSafe) on 11.x, 12.x and 13.x lines. Issue: malformed TLS 1.2 record...

CVE-2017-6136

In F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, GTM, Link Controller, PEM and WebSafe software version 13.0.0 and 12.0.0 - 12.1.2, undisclosed traffic patterns sent to BIG-IP virtual servers, with the TCP Fast Open and Tail Loss Probe options enabled in the associated TCP profile, may cause...

Code injection

In BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, Link Controller, PEM, and WebSafe software 12.0.0 to 12.1.1, in some cases the Traffic Management Microkernel TMM may crash when processing fragmented packets. This vulnerability affects TMM through a virtual server configured with a FastL4...

CVE-2017-6166

In BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, Link Controller, PEM, and WebSafe software 12.0.0 to 12.1.1, in some cases the Traffic Management Microkernel TMM may crash when processing fragmented packets. This vulnerability affects TMM through a virtual server configured with a FastL4...

CVE-2017-6166

In BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, Link Controller, PEM, and WebSafe software 12.0.0 to 12.1.1, in some cases the Traffic Management Microkernel TMM may crash when processing fragmented packets. This vulnerability affects TMM through a virtual server configured with a FastL4...

F5 Networks BIG-IP : BIG-IP FastL4 TMM vulnerability (K65615624)

In BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, Link Controller, PEM, and WebSafe software 12.0.0 to 12.1.1, in some cases the Traffic Management Microkernel TMM may crash when processing fragmented packets. This vulnerability affects TMM through a virtual server configured with a FastL4...

F5 BIG-IP Denial of Service Vulnerability (CNVD-2017-35573)

F5 BIG-IP LTM, etc. are products of F5 USA.LTM is a local traffic manager; APM is a suite of solutions that provide secure unified access to business-critical applications and networks.Traffic Management Microkernel TMM is one of the service processes that performs traffic management. A security...

F5 BIG-IP Denial of Service Vulnerability (CNVD-2017-35571)

F5 BIG-IP is a collection of software and hardware that allows you to control the traffic that passes through your network. A denial of service vulnerability exists in F5 BIG-IP. A remote user can cause the target traffic management microkernel TMM to reboot by sending specially crafted TCP traff...

F5 BIG-IP Denial of Service Vulnerability (CNVD-2017-35572)

F5 BIG-IP is a collection of software and hardware that allows you to control the traffic that passes through your network. A denial of service vulnerability exists in F5 BIG-IP. A remote user can cause the target traffic management microkernel TMM to restart by sending a specially crafted HTTP...

CVE-2017-6160

In F5 BIG-IP AAM and PEM software version 12.0.0 to 12.1.1, 11.6.0 to 11.6.1, 11.4.1 to 11.5.4, a remote attacker may create maliciously crafted HTTP request to cause Traffic Management Microkernel TMM to restart and temporarily fail to process traffic. This issue is exposed on virtual servers...

CVE-2017-6160

In F5 BIG-IP AAM and PEM software version 12.0.0 to 12.1.1, 11.6.0 to 11.6.1, 11.4.1 to 11.5.4, a remote attacker may create maliciously crafted HTTP request to cause Traffic Management Microkernel TMM to restart and temporarily fail to process traffic. This issue is exposed on virtual servers...